{"id":697,"date":"2021-09-03T18:22:31","date_gmt":"2021-09-03T18:22:31","guid":{"rendered":"https:\/\/www.practicallynetworked.com\/?page_id=697"},"modified":"2021-10-05T16:59:58","modified_gmt":"2021-10-05T16:59:58","slug":"tftp-exe-security-problem","status":"publish","type":"post","link":"https:\/\/www.practicallynetworked.com\/tftp-exe-security-problem\/","title":{"rendered":"TFTP.EXE Security Problem"},"content":{"rendered":"

Security problem with tftp.exe firmware update program.<\/h2>\n

The Windows firmware update program “tftp.exe”, supplied by Linksys and UMAX as part of their firmware update .exe files, stores the password to the router’s Administration server in\u00a0clear text<\/b>\u00a0in the system registry in the following key:<\/p>\n

For\u00a0Linksys<\/b>
\nHKEY_CURRENT_USER > Software >Software > tftp > Settings >Password<\/b><\/span><\/p>\n

For\u00a0UMAX<\/b>
\nHKEY_CURRENT_USER > Software >Software > UG3K > Settings >Password<\/b><\/span><\/p>\n

<\/h5>\n

 <\/p>\n

If you clear this key, it is just rewritten the next time you run the tftp.exe program.<\/p>\n

To fix this problem do the following:<\/span><\/b><\/p>\n

1) Download the new version of the program by clicking\u00a0here<\/a>.<\/span><\/b><\/p>\n

2) Run the program. It will clear the password from the Registry.\u00a0 You will also see a blank Password box in the program window.<\/span><\/b><\/p>\n

3) Find and Delete (or rename) the old program.<\/span><\/b><\/p>\n

4) Copy the new program to the same folder as the old one.<\/span><\/b><\/p>\n

attentionsml-7915081NOTE:
\n<\/b><\/span>\u00a0– You don’t have to actually do a firmware update. The password is cleared when the program’s window comes up.<\/p>\n

–\u00a0You will have to enter your Administration password each time you run tftp.exe.\u00a0 The program will no longer store the password.<\/p>\n

– Linksys will be making the new tftp.exe file available from\u00a0their FTP site<\/a><\/b>\u00a0soon and also including it in new firmware updaters.<\/p>\n","protected":false},"excerpt":{"rendered":"

Security problem with tftp.exe firmware update program. The Windows firmware update program “tftp.exe”, supplied by Linksys and UMAX as part of their firmware update .exe files, stores the password to the router’s Administration server in\u00a0clear text\u00a0in the system registry in the following key: For\u00a0Linksys HKEY_CURRENT_USER > Software >Software > tftp > Settings >Password For\u00a0UMAX HKEY_CURRENT_USER > Software >Software > UG3K > Settings >Password   If you clear this key, it is just rewritten the next time you run the tftp.exe program. To fix this problem do the following: 1) Download the new version of the program by clicking\u00a0here. 2) Run <\/p>\n","protected":false},"author":2,"featured_media":5596,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/posts\/697"}],"collection":[{"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/comments?post=697"}],"version-history":[{"count":0,"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/posts\/697\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/media\/5596"}],"wp:attachment":[{"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/media?parent=697"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/categories?post=697"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.practicallynetworked.com\/wp-json\/wp\/v2\/tags?post=697"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}